The Pennsylvania Supreme Court has drastically changed the data breach litigation landscape by holding that an employer has a common-law duty to use reasonable care to safeguard certain employee personal information. Source: New feed 2